Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe23e3a5-d129-3559-b203-5c00155802fe.roa
File:                     fe23e3a5-d129-3559-b203-5c00155802fe.roa (raw, json)
Hash identifier:          kVItmVUc5TaB3G51pOXQyWNhawknB6re53cHRVTCMzk=
Subject key identifier:   B9:D8:A3:64:95:ED:4E:44:06:A6:8B:CE:51:46:58:87:93:20:AD:D2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D4461D875D15F88CA1ECB0C00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe23e3a5-d129-3559-b203-5c00155802fe.roa
Signing time:             Mon 23 Mar 2026 19:53:41 +0000
ROA not before:           Mon 23 Mar 2026 19:53:41 +0000
ROA not after:            Sun 21 Jun 2026 19:53:41 +0000
asID:                     11798
IP address blocks:        50.114.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:61:d8:75:d1:5f:88:ca:1e:cb:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Mar 23 19:53:41 2026 GMT
            Not After : Jun 21 19:53:41 2026 GMT
        Subject: CN=331a5e65-063c-4e4c-a462-70da787bc595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:35:d1:30:1b:1f:83:37:54:80:8e:fd:14:
                    3c:5a:0f:b3:d9:f9:56:3c:7a:2c:41:ce:99:bd:a0:
                    5e:20:a0:f2:06:2f:3d:e1:a9:68:63:0d:ed:be:02:
                    08:3e:3a:8a:9c:94:0a:05:14:77:28:bb:22:ee:04:
                    d4:f1:2d:16:c3:0e:d6:c7:91:44:34:57:e9:2a:5d:
                    36:2c:c5:67:35:5d:7c:58:c4:29:db:42:69:09:b1:
                    75:b2:81:b4:f4:8e:1a:ba:4b:7d:07:80:62:77:f0:
                    22:b9:c5:45:6b:ac:77:ff:a9:0e:3a:64:2e:92:65:
                    46:80:60:00:51:7a:7c:b0:4f:2c:6d:dd:69:d8:51:
                    b4:a3:6f:b1:00:dd:d0:74:d4:6f:87:8b:09:f3:14:
                    11:f8:9f:2d:b3:be:59:17:b9:96:66:fd:d5:37:0f:
                    a6:5d:3c:9b:b2:05:7b:aa:c9:7f:94:29:d3:98:c2:
                    d2:52:29:42:53:19:17:4e:d3:4a:8d:a6:df:1f:cb:
                    c1:ca:54:0a:30:16:a8:ea:b6:97:91:74:1d:34:93:
                    b0:16:9b:9f:f2:9b:4f:1c:ff:db:20:32:14:d3:21:
                    58:b6:05:f0:b8:e2:7d:88:a1:4a:b1:3c:92:da:92:
                    5d:99:38:e5:30:1a:9b:57:fd:f0:7d:e1:02:59:b4:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D8:A3:64:95:ED:4E:44:06:A6:8B:CE:51:46:58:87:93:20:AD:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/fe23e3a5-d129-3559-b203-5c00155802fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:2e:53:ea:9a:79:75:ff:ef:d9:40:55:5a:44:13:9c:4a:e2:
         da:84:62:e7:1c:56:f1:b6:ee:6a:02:92:3b:b8:83:8c:83:1f:
         33:ca:8d:c1:f8:27:90:92:fb:a3:89:14:15:21:ac:69:ca:3e:
         e5:89:7c:da:3c:68:4c:d2:fc:b9:49:8d:46:79:82:c1:f0:df:
         0b:19:72:a6:93:e5:eb:12:d1:b3:4d:f4:e4:63:bf:83:2b:a3:
         ca:81:ca:b5:f0:09:0d:b2:5e:ab:70:19:f6:4c:a9:a7:4e:97:
         05:3d:52:91:ba:94:e9:6e:60:04:b5:8a:0a:1c:f1:2e:f5:8c:
         77:a2:10:81:6e:30:05:14:78:27:42:6c:c9:0a:c2:0d:ca:40:
         36:47:f0:95:42:17:e1:05:53:92:26:3c:d5:64:63:fc:51:03:
         eb:15:1c:2d:bd:3c:a8:82:b5:14:f1:e5:84:d7:d9:8a:10:6a:
         34:7e:a3:c5:69:ce:7b:37:37:62:78:16:d3:50:85:29:2f:bf:
         a2:39:85:95:93:62:70:e9:cb:b8:3a:59:ef:d5:cf:55:ec:e0:
         70:e3:21:ac:91:41:20:69:35:3b:19:c6:94:28:3c:33:6d:f1:
         b8:93:21:65:fc:bd:bc:61:01:c4:26:dd:18:0e:5c:a0:9a:23:
         4a:3c:35:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 22:32:37 2026 by rpki-client